Chata Nerina
Privacy policy
Personal data processing policy under the GDPR regulation for the website www.nerina.sk. Effective from May 2025.
1. Personal data controller
The controller of the website www.nerina.sk and the person responsible for the processing of personal data is:
| Business name | EHN Group s.r.o. |
| Company ID (IČO) | 36327379 |
| Registered office | Jánovce 203, 925 22 Veľké Úľany |
| rezervacie@nerina.sk | |
| Website | www.nerina.sk |
| Effective from | May 2025 |
2. What personal data we process
In connection with the provision of our services, we process the following categories of personal data:
2.1 Contact and identification data
- First name and surname
- Phone number
- E-mail address
- Residential address
2.2 Billing and payment data
- Billing address (if an invoice is issued)
- Data related to recreation vouchers
- Information about payments made
2.3 Operational data (collected automatically)
- Visitor's IP address
- Browser and device type
- Date and time of visit
- Behaviour on the website (pages visited, duration of visit)
3. Purpose and legal basis of data processing
| Purpose | Data processed | Legal basis (GDPR) |
|---|---|---|
| Booking and provision of the service | First name, surname, phone, e-mail, address | Art. 6(1)(b) - performance of a contract |
| Issuing an invoice / recreation voucher | First name, surname, address, employer | Art. 6(1)(c) - legal obligation |
| Responding to an enquiry / communication | Name, e-mail, message content | Art. 6(1)(f) - legitimate interest |
| Analytics and website improvement | IP address, cookies, behaviour on the website | Art. 6(1)(a) - consent (cookies) |
4. Special processing - Recreation vouchers
If a client uses a recreation voucher under Act No. 91/2010 Coll. on the support of tourism, we also process, to the necessary extent, data related to their employer and the voucher itself. We process this data on the basis of a legal obligation (Art. 6(1)(c) GDPR) and archive it for the period set by tax regulations (usually 10 years).
5. Retention period of personal data
| Type of data | Retention period |
|---|---|
| Contact data (booking) | For the duration of the contractual relationship + 3 years |
| Billing data and recreation vouchers | 10 years (tax and accounting archiving) |
| Communication (e-mail, enquiry) | 2 years from the last contact |
| Cookies and analytical data | According to the validity of consent, max. 13 months |
6. Recipients of personal data
We do not sell your personal data to third parties for marketing purposes. We may share the data exclusively with:
- Providers of IT and hosting services (website management, e-mail systems)
- Accountants or tax advisors (billing data)
- State administration authorities (on the basis of a legal obligation - e.g. the tax office)
All processors are contractually bound to protect personal data in accordance with the GDPR.
7. Your rights as a data subject
Under the GDPR regulation you have the following rights:
| Right | Description |
|---|---|
| Right of access | You can request a copy of the personal data we process about you. |
| Right to rectification | You can request the correction of inaccurate or incomplete data. |
| Right to erasure | You can request the erasure of your data once the purpose of processing has ceased. |
| Right to restriction | You can request the restriction of the processing of your data. |
| Right to portability | You can request the transfer of your data to another controller. |
| Right to object | You can object to processing based on legitimate interest. |
| Right to withdraw consent | If you have given consent (e.g. cookies), you can withdraw it at any time. |
You can exercise your rights in writing at: rezervacie@nerina.sk. We will respond to your request within 30 days.
You also have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (www.dataprotection.gov.sk).
8. Cookies and tracking on the website
Our website uses cookies. Cookies are small text files stored in your browser that help us improve the functionality and analytics of the website.
Types of cookies we use:
- Essential cookies - ensure the basic functioning of the website (do not require consent)
- Analytical cookies - track visitor behaviour (e.g. Google Analytics) - require consent
- Marketing cookies - personalised advertising - require consent
You can manage your consent to cookies directly in the cookie banner settings on the website, or in your browser settings.
9. Security of personal data
We have adopted appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. Our measures include:
- Encrypted data transfer via HTTPS (SSL certificate)
- Restricted access to personal data only for authorised persons
- Regular backup and updating of systems
- Contractual protection with external processors
10. Changes to this document
We may update this personal data protection policy from time to time. We will inform you of any material changes by means of a notice on the website. We recommend that you check this document regularly.
The current version of this document is always available at: www.nerina.sk/gdpr
11. Contact
If you have any questions regarding the processing of your personal data, please contact us:
| rezervacie@nerina.sk | |
| Web | www.nerina.sk |
| Effective from | May 2025 |
Thank you for trusting us and for protecting your privacy.